Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Oct 30, 2017 |
| Freebsd | — | Upgrade node4Upgrade nodeUpgrade node6 | Oct 26, 2017 | Oct 25, 2017 |
| Suse | — | Upgrade firefox-gio-branding-upstreamUpgrade mozilla-nssUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-libffi7Upgrade nodejs6-develUpgrade firefox-libgtk-3-0Upgrade firefox-libcairo-gobject2Upgrade firefox-atk-langUpgrade firefox-gtk3-dataUpgrade firefox-libffi4Upgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libsoftokn3-32bitUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-amharicUpgrade nodejs6Upgrade npm8Upgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-multipressUpgrade npm6Upgrade nodejs4Upgrade MozillaFirefox-translations-commonUpgrade nodejs4-docsUpgrade mozilla-nspr-develUpgrade firefox-gtk3-langUpgrade libfirefox-gobject-2_0-0Upgrade firefox-libcairo2Upgrade libfirefox-gio-2_0-0Upgrade nodejs8-docsUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-toolsUpgrade nodejs8-develUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-ximUpgrade mozilla-nss-certs-32bitUpgrade nodejs4-develUpgrade nodejs6-docsUpgrade mozilla-nss-toolsUpgrade npm4Upgrade MozillaFirefoxUpgrade mozilla-nspr-32bitUpgrade mozilla-nsprUpgrade libfreebl3-32bitUpgrade libfirefox-glib-2_0-0Upgrade libfreebl3Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade nodejs8Upgrade firefox-glib2-langUpgrade MozillaFirefox-translations-otherUpgrade firefox-glib2-toolsUpgrade mozilla-nss-develUpgrade firefox-libatk-1_0-0Upgrade libsoftokn3Upgrade mozilla-nss-certs | Jan 5, 2018 | Oct 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub